ns-harness
Pass
Audited by Gen Agent Trust Hub on Sep 15, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONPROMPT_INJECTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [PROMPT_INJECTION]: The skill uses strong instructional framing within generated artifacts to ensure future agent sessions strictly adhere to the project's standardized rules and routing logic. For example, the instructions for generating
CLAUDE.mdinclude directives such as "CRITICAL — NO EXCEPTIONS" and "No skip. No defer." to enforce the use ofAGENTS.md. This behavior is the primary intended function of the harness tool to maintain development consistency. - [EXTERNAL_DOWNLOADS]: The skill references and installs developer tools from trusted and well-known sources. It fetches the
skill-creatortool from the official Anthropics skills repository on GitHub and utilizes the@nextstage-brasil/harnessCLI for project synchronization and preparation. These downloads are documented parts of the skill's setup process. - [COMMAND_EXECUTION]: The instructions direct the agent to execute shell commands for standard project maintenance tasks. These include
git worktreefor environment isolation,docker execfor executing backend tests in isolated containers, andnpxfor running vendor-specific management tools. All commands are scoped to the intended functionality of a project harness. - [INDIRECT_PROMPT_INJECTION]: The skill processes repository source code during its "reverse-engineering" and "mapping" phases, creating an attack surface for indirect prompt injection. The skill mitigates this risk by employing structured templates, reconnaissance checklists, and "anti-leakage" protocols to ensure that external data is processed into sanitized business-level specifications without executing unintended instructions.
Audit Metadata